crates.io / aws-lc-rs / 1.18.2

aws-lc-rs 1.18.2

Source

https://github.com/aws/aws-lc-rs

Artifact scanned

aws-lc-rs-1.18.2.crate (crate · 243.9 KB · SHA-256 faac5829c2b7…)

Compared with

aws-lc-rs-1.18.1.crate (0 signals introduced since)

Files

104 scanned, 7 skipped (binary, oversized, or unrecognised)

Signals

1 critical · 2 warn · 24 info

Scan time

2.5 s

LLM review

The LLM review by claude-haiku-5-5 (Anthropic) failed; signals are shown unreviewed.

Disclude version

4.3.0

Scanned (UTC)

2026-10-24 11:45

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

1. critical dynamic-execution scripts/run-valgrind.sh:206:4

   `eval` called on a dynamic (variable/substitution) expression (ast pass, confidence 0.90)

   # Run the tests
   if eval ${CARGO_CMD}; then
       echo ""
       echo -e "${GREEN}=== Valgrind tests PASSED ===${NC}"

2. warn dynamic-execution README.md:228:1

   [embedded bash] pipeline feeds into `sh` — piped data is executed as shell code (ast pass, confidence 0.80)

   # Install Rust
   curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
   source "$HOME/.cargo/env"

3. warn dynamic-import README.md:229:1

   [embedded bash] `source` called with a dynamic path — sourcing a variable script path (ast pass, confidence 0.75)

   curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
   source "$HOME/.cargo/env"
   
   # Clone and initialize a local repository

4. info unicode-invisible src/cipher.rs:914:18

   U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

       ///
       /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
       /// Offered for compatibility purposes only. This is an extremely dangerous mode, and
       /// very likely not what you want to use.

5. info unicode-invisible src/cipher.rs:914:21

   U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

       ///
       /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
       /// Offered for compatibility purposes only. This is an extremely dangerous mode, and
       /// very likely not what you want to use.

6. info unicode-invisible src/cipher.rs:914:24

   U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

       ///
       /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
       /// Offered for compatibility purposes only. This is an extremely dangerous mode, and
       /// very likely not what you want to use.

7. info unicode-invisible src/cipher.rs:940:18

   U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

       ///
       /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
       /// Offered for compatibility purposes only. This is an extremely dangerous mode, and
       /// very likely not what you want to use.

8. info unicode-invisible src/cipher.rs:940:21

   U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

       ///
       /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
       /// Offered for compatibility purposes only. This is an extremely dangerous mode, and
       /// very likely not what you want to use.

9. info unicode-invisible src/cipher.rs:940:24

   U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

       ///
       /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
       /// Offered for compatibility purposes only. This is an extremely dangerous mode, and
       /// very likely not what you want to use.

10. info unicode-invisible src/cipher.rs:1082:18

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

        ///
        /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
        /// Offered for compatibility purposes only. This is an extremely dangerous mode, and
        /// very likely not what you want to use.

11. info unicode-invisible src/cipher.rs:1082:21

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

        ///
        /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
        /// Offered for compatibility purposes only. This is an extremely dangerous mode, and
        /// very likely not what you want to use.

12. info unicode-invisible src/cipher.rs:1082:24

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

        ///
        /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
        /// Offered for compatibility purposes only. This is an extremely dangerous mode, and
        /// very likely not what you want to use.

13. info unicode-invisible src/cipher.rs:1108:18

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

        ///
        /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
        /// Offered for compatibility purposes only. This is an extremely dangerous mode, and
        /// very likely not what you want to use.

14. info unicode-invisible src/cipher.rs:1108:21

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

        ///
        /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
        /// Offered for compatibility purposes only. This is an extremely dangerous mode, and
        /// very likely not what you want to use.

15. info unicode-invisible src/cipher.rs:1108:24

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

        ///
        /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
        /// Offered for compatibility purposes only. This is an extremely dangerous mode, and
        /// very likely not what you want to use.

16. info unicode-invisible src/cipher/padded.rs:113:18

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

        ///
        /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
        /// Offered for computability purposes only. This is an extremely dangerous mode, and
        /// very likely not what you want to use.

17. info unicode-invisible src/cipher/padded.rs:113:21

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

        ///
        /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
        /// Offered for computability purposes only. This is an extremely dangerous mode, and
        /// very likely not what you want to use.

18. info unicode-invisible src/cipher/padded.rs:113:24

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

        ///
        /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
        /// Offered for computability purposes only. This is an extremely dangerous mode, and
        /// very likely not what you want to use.

19. info unicode-invisible src/cipher/padded.rs:269:18

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

        ///
        /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
        /// Offered for computability purposes only. This is an extremely dangerous mode, and
        /// very likely not what you want to use.

20. info unicode-invisible src/cipher/padded.rs:269:21

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

        ///
        /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
        /// Offered for computability purposes only. This is an extremely dangerous mode, and
        /// very likely not what you want to use.

21. info unicode-invisible src/cipher/padded.rs:269:24

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

        ///
        /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
        /// Offered for computability purposes only. This is an extremely dangerous mode, and
        /// very likely not what you want to use.

22. info unicode-invisible src/cipher/streaming.rs:388:18

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

        ///
        /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
        /// Offered for computability purposes only. This is an extremely dangerous mode, and
        /// very likely not what you want to use.

23. info unicode-invisible src/cipher/streaming.rs:388:21

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

        ///
        /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
        /// Offered for computability purposes only. This is an extremely dangerous mode, and
        /// very likely not what you want to use.

24. info unicode-invisible src/cipher/streaming.rs:388:24

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

        ///
        /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
        /// Offered for computability purposes only. This is an extremely dangerous mode, and
        /// very likely not what you want to use.

25. info unicode-invisible src/cipher/streaming.rs:694:18

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

        ///
        /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
        /// Offered for computability purposes only. This is an extremely dangerous mode, and
        /// very likely not what you want to use.

26. info unicode-invisible src/cipher/streaming.rs:694:21

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

        ///
        /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
        /// Offered for computability purposes only. This is an extremely dangerous mode, and
        /// very likely not what you want to use.

27. info unicode-invisible src/cipher/streaming.rs:694:24

    U+FE0F VARIATION SELECTOR-16 (invisible payload carrier) in source (in string/comment) (raw pass, confidence 0.54)

        ///
        /// # ☠⟨U+FE0F⟩ ⟨U+FE0F⟩⟨U+FE0F⟩⟨U+FE0F⟩DANGER ☠⟨U+FE0F⟩
        /// Offered for computability purposes only. This is an extremely dangerous mode, and
        /// very likely not what you want to use.

Reproduce This Scan

Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.3.0
curl -fsSL -o aws-lc-rs-1.18.2.crate 'https://static.crates.io/crates/aws%2Dlc%2Drs/aws%2Dlc%2Drs-1%2E18%2E2.crate'
printf '%s  %s\n' faac5829c2b74c28f830747e7818ccfb684261b5f48a1118b1e2a13d36dfab13 aws-lc-rs-1.18.2.crate | shasum -a 256 -c -
mkdir pkg && tar -xzf aws-lc-rs-1.18.2.crate -C pkg --strip-components 1
disclude scan --untrusted --severity info pkg